telegram-test-specs
Pass
Audited by Gen Agent Trust Hub on Jun 27, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is primarily instructional documentation defining a JSON schema for Telegram bot dialog tests. It does not contain executable code or instructions that bypass security controls.
- [CREDENTIALS_UNSAFE]: No hardcoded credentials or insecure secret management practices were found. The skill explicitly promotes a 'tokenless' testing approach, which is a security best practice to avoid the exposure of Telegram bot tokens in development and CI/CD environments.
- [COMMAND_EXECUTION]: While the skill describes the use of a test harness CLI, the commands and environment variables (such as AGNTDEV_BOT_MODULE) are standard configuration for a local development tool and do not involve arbitrary or malicious execution.
- [EXTERNAL_DOWNLOADS]: No remote scripts or external code downloads from untrusted sources were detected. The skill references local project paths for the bot module and test specifications.
Audit Metadata